<form action="?<?= $query_string; ?>" method="post" name="login" id="login">
  <input name="user" type="text" id="user" size="10" maxlength="100">
  <input name="password" type="password" id="password" size="10" maxlength="100">
  <input type="submit" name="Submit" value="Login">
</form>